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IN THE CLAIMS: 

The text of all pending claims, (including withdrawn claims) is set forth below. Cancelled 
and not entered claims are indicated with claim number and status only. The claims as listed 
below show added text with underlining and deleted text with str i k e through . The status of each 
claim is indicated with one of (original), (currently amended), (cancelled), (withdrawn), (new), 
(previously presented), or (not entered). 

. Please CANCEL claims 2, 3, 7, 25, 26 and 30 without prejudice or disclaimer and 
AMEND claims 1,4, 8-9, 12, 14-15, 18, 20, 24, 27, 35, 38 and 47 in accordance with the 
following: 

1 . (currently amended) A system for managing information comprising: 

a communication request monitor unit which monitors a communication request; 
a management unit which selects a countermeasure based upon information notified 
from the communication request monitor unit; af^ 

a performing unit which performs tbe-a_countermeasure in response to an instruction 
from the management unit, 

wherein said management unit i nclud e s, comprises: 

a database which manages a notification content from the communication 
request monitor unit and a-the countermeasure that the performing unit performs 
wh ile le tt i ng such that the notification content and the countermeasure correspond 
to each othen-^and 

a selection unit which selects a-the countermeasure from various angles 
based upon the database and mounting information, operation information, 
and/or security information to be performed: 
an information collection unit which collects information related to a kind, a content, an 
order and a time interval of two or more communications in a proceeding process of an attack 
event or a leakage event: and 

a reflection unit which reflects the information collected and regulated by the information 
collection unit upon the database . to thereby predict a possible attack event or a leakage event 
and to avoid the predicted attack event or leakage event beforehand, wherein the information 
notified by the communication reguest monitor unit and/or countermeasure selected by the 
management unit are weighted . 

2. (cancelled) 
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3. (cancelled) 

4. (currently amended) The system according to claim 31, wherein based upon 
which of the mounting information, the operation management information and/or the security 
information a countermeasure is selected can be setting-changed according to the selection of a 
user. 

5. (original) The system according to claim 1 , wherein the communication request 
monitor unit, management unit, and the performing unit are provided in plurality. 

6. (original) The system according to claim 5, wherein the communication request 
monitor units, management units, and the performing units cooperate with each other between 
the same type or different types thereof to exchange information. 

7. (cancelled) 

8. (currently amended) The system according to claim 71, wherein a weight 
coefficient for the weighting can be arbitrarily set by a user. 

9. (currently amended)The system according to claim 71, wherein a weight 
coefficient for the weighting is set based upon the mounting information, operation management 
information and/or security information. 

10. (original) The system according to claim 1 , wherein the database holds 
information notified by the communication request monitor unit in time series, and the selection 
un jt selects a countermeasure based upon the time series information stored in the database. 

11 . (original) The system according to claim 5, further comprising a site map 
formation unit which forms a site map representing a spatial arrangement of a website based 
upon the information notified by the plural communication request monitor unit. 

12. (currently amended) The system according to claim^l, further comprising a site 
map formation unit which forms a site map representing a spatial arrangement of a website 
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based upon the information notified by the plural communication request monitor unit. 

13. (original) The system according to claim 10, further comprising a site map 
formation unit which forms a site map representing a spatial arrangement of a website based 
upon the information notified by the plural communication request monitor unit. 

14. (currently amended) The system according to claim 5, further comprising a 
monitor condition notification unit which notifies the communication request monitor unit of the 
kind and/or time of a communication to be a monitor object based upon the-a site map formed by 
tbe-a_site map formation unit. 

1 5. (currently amended) The system according to claim 71_, further comprising a 
monitor condition notification unit which notifies the communication request monitor unit of the 
kind and/or time of a communication to be a monitor object based upon the-a site map formed by 
the-a_site map formation unit. 

16. (original) The system according to claim 10, further comprising a monitor 
condition notification unit which notifies the communication request monitor unit of the kind 
and/or time of a communication to be a monitor object based upon the a site map formed by the 
site map formation unit. 

17. (original) The system according to claim 1 , wherein the management unit gives a 
request to a website existing in a network and automatically updates the database based upon 
information replied in response to the request. 

1 8. (currently amended) The system according to claim 1 7, wherein the request is 
performed i n r e spons e to a r e qu e st of at a use r's suggestion . 

1 9. (original)The system according to claim 1 , wherein the management unit 
automatically updates the database based upon information automatically transmitted from a 
website existing in a network. 

20. (currently amended) The system according to claim 19, wherein the information 
automatically transmitted from a website existing in a network afe-isteken in the database in 



4 



Serial No. 09/955,972 

response to a request of a user. 

21 . (original) The system according to claim 1 , further comprising a vulnerability 
present unit which provides vulnerability of the system; and an information collection unit which 
collects information related to an attack the vulnerability presented by the vulnerability present 
unit. 

22. (original) The system according to claim 1 , further comprising an investigation unit 
investigating an outgoing source of a communication content and a determination unit which 
determines whether or not a website is made a stepping-stone by an ill-intentioned person 
based upon an investigation result by the investigation unit. 

23. (original) The system according to claim 1 , further comprising a decoy unit 
leading a communication to a location different from an attack object to avoid an attack. 

24. (currently amended) A method of managing information comprising: 

a communication request monitor step monitoring a communication request by a 
communication request monitor unit; 

a selection step in which a management unit selects a countermeasure from various 
angles -based upon a database and mounting information, operation management information, 
and/or security information, wherein the database -whiefr manages a notification content notified 
by the communication request monitor step and a countermeasure to be performed wMe 
mak i ng th e m such that the notification content and the countermeasure correspond to each 
other; and 

a performing step in which a performing unit performs a- the countermeasure selected in 
response to an instruction from the management step; 

an information collection step collecting information related to a kind, a content, an order 
and a time interval of two or more communications in a proceeding process of an attack event or 
a leakage event; and 

a reflection step reflecting the information collected and regulated by the information 
collection step upon the database, to thereby predict a possible attack event or a leakage event 
and to avoid the predicted attack event or leakage event beforehand, wherein the information 
notified by the communication reguest monitor unit and/or countermeasure selected by the 
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25. (cancelled) 

26. (cancelled) 

27. (currently amended) The method according to claim 2624, wherein based upon 
which of the mounting information, the operation management information and/or the security 
information a countermeasure is selected and can be setting-changed according to the selection 
of a user. 

28. (original) The method according to claim 24, wherein the communication request 
monitor unit, management unit, and the performing unit are provided in plurality. 

29. (original) The method according to claim 28, wherein the respective plurality of 
communication request monitor units, management units, and performing units cooperate with 
each other between the same type or different types thereof to exchange information. 

30. (cancelled) 

31 . (original) The method according to claim 30, wherein a weight coefficient for the 
weighting can be arbitrarily set by a user. 

32. (currently amended) The method according to claim 3024, wherein a weight 
coefficient for the weighting is set based upon the mounting information, operation management 
information and/or security information. 

33. (original) The method according to claim 24, wherein the database holds 
information notified by the communication request monitor unit in time series, and the selection 
step selects a countermeasure based upon the time series information stored in the database. 

34. (original) The method according to claim 28, further comprising a site map 
formation step forming a site map representing a spatial arrangement of a website based upon 
the information notified by the communication request monitor units. 
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35. (currently amended) The method according to claim 3024, further comprising a 
site map formation step forming a site map representing a spatial arrangement of a website 
based upon the information notified by the communication request monitor units. 

36. (original) The method according to claim 33, further comprising a site map 
formation step forming a site map representing a spatial arrangement of a website based upon 
the information notified by the communication request monitor units. 

37. (original) The method according to claim 28, further comprising a monitor 
condition notification step notifying the communication request monitor units of the kind and/or 
time of a communication to be a monitor object based upon the a site map formed by the site 
map formation step. 

38. (currently amended) The method according to claim 3024. further comprising a 
monitor condition notification step notifying the communication request monitor units of the kind 
and/or time of a communication to be a monitor object based upon the a site map formed by the 
site map formation step. 

39. (original) The method according to claim 33, further comprising a monitor 
condition notification step notifying the communication request monitor units of the kind and/or 
time of a communication to be a monitor object based upon the a site map formed by the site 
map formation step. 

40. (original) The method according to claim 24, wherein the management unit gives 
a request to a website existing in a network and automatically updates the database based upon 
information replied in response to the request. 

41 . (original) The method according to claim 40, wherein the request is performed in 
response to a request of a user. 

42. (original) The method according to claim 24, wherein the management unit 
automatically updates the database based upon information automatically transmitted from a 
website existing in a network. 
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43. (original) The method according to claim 42, wherein the database is 
automatically update based on the information transmitted from a website existing in a network 
in response to a request of a user. 

44. (original) The method according to claim 24, further comprising a vulnerability 
present step of providing vulnerability of the system; and an information collection step collecting 
information related to an attack against the vulnerability provided in the vulnerability present 
step. 

45. (original) The method according to claim 24, further comprising an investigation 
step investigating an outgoing source of a communication content and a determination step 
determining whether or not a website is made a stepping-stone by an ill-intentioned person 
based upon an investigation result by the investigation step. 

46. (original) The method according to claim 24, further comprising a decoy unit 
leading a communication to a location different from an attack object to avoid an attack. 

47. (currently amended) A computer readable medium for stor i ng 
i nstruot i ons comprising a method , wh i ch whon ex e cut e d on performed by a computer, caus e s th e 
comput e r to p e rform th e st e ps o f the method comprising : 

monitoring communication requests; 

outputting a notification in case of a-an abnormality; 

selecting a countermeasure from various angles based upon a database and mounting 
information, operation management information, and/or security information, wherein the 
database wh i ch manages a_content o f the notification and ^corresponding countermeasure; 

takiro -performing a countermeasure against the abnormality based on the selected 
countermeasure; 

collecting information related to a kind, a content, an order, and a time interval of two or 
more communications in a proceeding process of an attack event or a leakage event; and 

reflecting the information collected and regulated by the information collected upon the 
database, to thereby predict a possible attack event or a leakage event and to avoid the 
predicted attack event or leakage event beforehand . 
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